Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HYA/E4SfKqJKv5mQetWl1Akpcp_DkK0.roa
File: E4SfKqJKv5mQetWl1Akpcp_DkK0.roa (raw, json)
Hash identifier: tZR3DCNjkMtBqJwMSNk7GFXIlhnyogVOnN//83bVHq4=
Subject key identifier: 13:84:9F:2A:A2:4A:BF:99:90:7A:D5:A5:D4:09:29:72:9F:C3:90:AD
Certificate issuer: /CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Certificate serial: 094C
Authority key identifier: 0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/E4SfKqJKv5mQetWl1Akpcp_DkK0.roa
Signing time: Wed 29 Sep 2021 02:51:50 +0000
ROA not before: Wed 29 Sep 2021 02:51:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 10085
IP address blocks: 103.252.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2380 (0x94c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0EAE2D331F2C4280C16AA8BAFE16FDDCCE3715B4
Validity
Not Before: Sep 29 02:51:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=13849F2AA24ABF99907AD5A5D40929729FC390AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:2b:da:1b:59:58:c4:7c:af:2d:cc:03:7b:
74:b8:21:af:07:71:2d:75:57:94:4d:cd:b3:5b:54:
23:78:cd:0d:d6:03:0c:aa:17:73:ac:1a:9a:43:d6:
f6:41:59:10:e2:1e:85:f7:7e:72:98:03:be:0b:d0:
72:36:48:5b:76:10:c4:f8:b4:a2:13:50:b5:9b:cf:
0c:d1:9d:be:b5:b1:69:a7:f5:a6:6a:8d:34:de:ae:
94:ba:fc:58:83:c3:3d:0c:ef:dd:e0:c8:c3:e6:9a:
5b:9b:8d:03:18:93:dd:2c:e6:68:4e:9b:fe:e2:e2:
f5:ae:07:27:9e:fb:ac:96:3d:a5:f1:07:31:d8:7d:
d4:1a:09:fd:4d:79:a2:12:49:62:85:7a:0b:8e:12:
2c:c8:b0:9d:3c:8e:89:b3:b1:ca:78:51:31:e7:de:
2a:c0:4b:53:55:11:3b:4d:e4:aa:20:c5:b5:ac:0b:
f8:b7:23:c1:45:4c:55:58:59:30:dd:f1:fd:95:f9:
e2:e6:87:e5:a7:5d:41:bb:f1:be:eb:3f:68:b5:f3:
37:66:71:6b:5f:73:1c:56:0c:e7:f2:a5:3f:36:78:
98:ed:81:ea:10:09:62:ea:13:da:0f:a4:72:8c:4f:
ed:a4:ca:2a:d5:6a:30:71:57:06:04:cb:40:32:d6:
ce:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:84:9F:2A:A2:4A:BF:99:90:7A:D5:A5:D4:09:29:72:9F:C3:90:AD
X509v3 Authority Key Identifier:
keyid:0E:AE:2D:33:1F:2C:42:80:C1:6A:A8:BA:FE:16:FD:DC:CE:37:15:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Dq4tMx8sQoDBaqi6_hb93M43FbQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HYA/E4SfKqJKv5mQetWl1Akpcp_DkK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
61:d5:17:d3:07:e5:a3:bf:f6:60:e5:b9:b8:eb:1d:35:e1:c3:
b0:82:b8:7b:91:91:7e:e7:5e:36:20:a8:df:0e:e4:3d:aa:42:
f7:51:73:b7:a2:91:86:ab:25:de:90:db:53:96:90:a8:ee:4c:
46:2a:33:2a:17:fa:9c:4a:d2:a7:f0:62:5e:22:fd:74:64:6f:
46:55:b7:b6:1c:87:a9:94:db:3a:5a:eb:a9:5d:0f:84:31:76:
51:5f:4c:53:84:7f:c5:28:e5:2c:b5:d7:ad:b5:cf:f7:2c:a0:
2d:86:64:86:1e:bb:a9:ed:4f:e2:fa:f3:93:81:b5:d2:2a:e2:
b0:14:47:3e:fd:cb:1c:38:61:ff:96:67:a6:96:7d:11:a4:61:
51:58:d3:c8:f6:ad:44:a5:18:56:28:2a:81:05:8d:83:e2:5d:
13:c6:59:20:41:70:5c:d5:7a:31:84:ee:7b:7b:7d:56:cf:be:
63:89:11:cc:04:08:1c:f2:a0:a8:8c:d0:0e:ef:43:e7:45:df:
a2:49:34:3a:3e:86:af:e1:e2:b3:8b:e8:59:f8:34:45:8c:86:
ba:82:46:5f:92:07:2a:58:d4:b7:e5:ba:58:c0:6e:7b:c8:91:
ff:f5:b8:cc:41:35:c0:af:cc:a3:bb:ce:2f:18:58:7e:92:71:
10:9c:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:09 2024 by rpki-client on console-ams.rpki-client.org